898 matches found
Authenticated CLI Commands Buffer Overflow
...
FGFM protocol allows unauthenticated reset of the connection
...
Weak authentication in WAD/GUI
...
Restricted CLI command bypass
...
Heap Overflow in fgfmsd
...
Race condion in FortiCloud SSO SAML authentication
...
Domain fronting protection bypass in explicit web proxy
...
Weak authentication - FGFM protocol
...
DNS type 65 resource record requests bypass DNS filter
...
eap-cert-auth bypass via revoked certificate
...
TACACS+ authentication bypass
...
No certificate name verification for fgfm connection
...
OS command injection in CLI command
...
error based SQLI on device del feature
...
Use of hardcoded key used for remote backup server password encryption
...
Insertion of sensitive information into Event log
...
Out-of-bounds Write in IPSEC Daemon
...
`Host` header injection
...
Arbitrary file write on GUI
...
Arbitrary file deletion in administrative interface
...
OS command injection
...
Out-of-bounds Write in sndproxy
...
Out of bounds read in ipsec ike
...
Lack of capacity to filter logs by administrator access
...
SSLVPN WEB UI Text injection
...
Priviledged admin able to view device summary for device in different ADOM
...
Weak key derivation for backup file
...
Stack buffer overflow on bluetooth write feature
...
Double free with double usage of json_object_put
...
Arbitrary file delete on endpoint
...
Authorization bypass in SSLVPN bookmarks
...
Improper access control in backup and restore features
...
Fortilink lack of certificate validation
...
Format String Bug in fgfmd
...
Format String Bug in HTTPSd
...
Cross-site scripting forgery (CSRF) in HTTPd CLI console
...
Use of hardcoded credentials in fmgsvrd
...
Reflected Cross Site Scripting (XSS) on download progress endpoint
...
Arbitrary file delete
...
Improper inter ADOM access control
...
Command injection due to an unsafe usage of function
...
Server side request forgery on fortiview top threats report generation feature.
...
IPS Engine evasion using custom TCP flags
...
Unprivileged user can access web console and run some unauthorized commands
...
OS command injection
...
Path traversal in history downloadzip
...